<<< Make Two Copies | Index | Suspect Computer >>> |
Computers where actual forensic examination steps take place should be treated as designated forensic workstations.
Computers used to store and analyze digital evidence should not be connected to the public Internet.
(There is a risk that an intruder could gain unauthorized access to the evidence.)
<<< Make Two Copies | Index | Suspect Computer >>> |